Format

common/constants.nix

@@ -40,6 +40,7 @@ with lib; {
         prowlarr = 30784;
         radarr = 37196;
         sonarr = 32438;
+        tailscale = 62662;
         vault = 25487;
       };
       description = ''
@@ -97,11 +98,37 @@ with lib; {
         The username across all devices.
       '';
     };
+    zfsPoolOptions = mkOption {
+      type = types.attrsOf types.str;
+      default = {
+        ashift = "12";
+        autotrim = "on";
+        listsnapshots = "on";
+      };
+      description = ''
+        The default options for ZFS pools.
+      '';
+    };
+    zfsRootFsOptions = mkOption {
+      type = types.attrsOf types.str;
+      default = {
+        acltype = "posix";
+        atime = "off";
+        compression = "zstd";
+        dnodesize = "auto";
+        mountpoint = "none";
+        normalization = "formD";
+        xattr = "sa";
+      };
+      description = ''
+        The default root filesystem options for ZFS pools.
+      '';
+    };
     wildcard = mkOption {
       type = types.str;
       default = "0.0.0.0";
       description = ''
-        The localhost address.
+        The wildcard address for binding to all interfaces.
       '';
     };
   };

common/default.nix

@@ -3,9 +3,10 @@
     home-manager.nixosModules.default
     sops-nix.nixosModules.default
     ./constants.nix
+    ./network.nix
+    ./nix.nix
     ./secrets.nix
     ./users.nix
-    ./nix.nix
   ];
 
   home-manager.sharedModules = [inputs.plasma-manager.homeModules.plasma-manager];

common/network.nix

@@ -0,0 +1,8 @@
+{config, ...}: {
+  networking.nftables.enable = true;
+
+  services.tailscale = {
+    enable = true;
+    port = config.constants.port.tailscale;
+  };
+}

common/nix.nix

@@ -1,4 +1,6 @@
 {config, ...}: {
+  boot.tmp.cleanOnBoot = true;
+
   nix = {
     gc = {
       automatic = true;

common/users.nix

@@ -1,5 +1,6 @@
 {
   config,
+  lib,
   pkgs,
   ...
 }:
@@ -239,7 +240,7 @@ in {
       };
     };
     resolved.enable = true;
-    syncthing = {
+    syncthing = lib.mkIf config.services.syncthing.enable {
       configDir = "${homeDir}/.config/syncthing";
       dataDir = "${homeDir}/.local/share/syncthing";
       openDefaultPorts = true;